Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/451956bf-1271-3c19-b266-165954929a68.roa
File:                     451956bf-1271-3c19-b266-165954929a68.roa (raw, json)
Hash identifier:          eb1aQP6jGlJehtiKHHFmJUi1ldGPYWYRIbWnaUtC0no=
Subject key identifier:   9B:9C:1E:C1:13:0B:24:A1:A4:17:34:DD:38:94:93:C5:F2:56:1B:0A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584598FE020E5ADF1F906A1F1760
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/451956bf-1271-3c19-b266-165954929a68.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     852
IP address blocks:        173.46.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:02:0e:5a:df:1f:90:6a:1f:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=6954075d-8126-4379-b0a4-0ba336a88f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:dc:42:b1:ff:99:bf:d9:b7:46:64:d3:40:
                    b7:14:d3:d8:ac:67:c8:38:3b:68:f4:52:12:8a:1a:
                    ff:6f:6c:d5:7d:54:7d:33:4a:af:26:77:56:47:5b:
                    40:3d:9a:99:f2:a4:16:49:af:1e:98:01:73:af:ce:
                    35:8f:7e:f0:b7:0c:5e:0d:48:2b:25:0c:e8:32:cc:
                    ad:75:a4:a2:95:b5:4b:2e:eb:51:37:ac:75:be:6c:
                    a4:53:2c:84:b3:81:89:5f:74:de:72:70:e6:63:d5:
                    3e:19:e2:de:2f:a3:f8:27:00:ee:77:31:a0:c2:c7:
                    8f:bf:6e:ed:5d:09:01:8e:b5:94:93:de:5f:29:a1:
                    1b:b2:ca:03:8f:84:d9:69:25:8c:05:2d:6b:dd:73:
                    1c:e9:69:57:3d:cc:87:25:72:5d:68:7f:a3:ca:da:
                    5f:2e:b3:6c:27:07:1a:e6:5b:25:55:65:49:f2:49:
                    79:ee:aa:80:07:5f:af:1f:09:28:d8:91:28:e1:6f:
                    f4:2d:c6:f3:13:8f:78:a2:7b:33:79:55:31:f4:b6:
                    9a:dc:c6:a0:6b:7d:99:61:42:fc:9a:e9:98:1b:6c:
                    14:9b:e6:4e:73:8f:6b:ac:d9:7b:21:34:25:57:3c:
                    30:b6:fa:40:14:e0:85:de:57:70:cb:b0:a2:6e:85:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9C:1E:C1:13:0B:24:A1:A4:17:34:DD:38:94:93:C5:F2:56:1B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/451956bf-1271-3c19-b266-165954929a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.46.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:af:1e:f5:ed:b7:c5:db:f2:df:35:0e:55:67:0a:8d:9d:
         a4:45:8d:aa:6c:c1:5e:d5:43:33:03:e7:92:68:d5:8a:d8:ca:
         c0:24:d5:4a:c2:84:62:9b:be:a9:6c:63:07:43:05:5c:12:b7:
         44:2a:d3:5c:bc:1f:9b:c7:57:65:0d:71:85:a7:f4:98:ad:d2:
         ca:b3:44:1c:21:78:5e:be:db:21:8d:a0:b6:12:50:b1:77:dc:
         56:49:4b:60:53:5a:0d:de:d9:6d:80:98:b8:c7:a8:52:64:c3:
         dc:6e:12:eb:61:66:bd:8f:f6:70:18:71:04:e3:9f:3f:26:d3:
         04:db:c8:6e:fd:95:ed:22:45:6a:c8:cf:17:ff:c3:e9:4f:10:
         03:6c:8e:08:33:84:c0:58:7b:8f:82:49:6c:fb:e9:bb:a8:6a:
         36:e3:ff:a3:fe:aa:b4:b3:31:aa:b5:56:06:62:1d:7c:cb:7a:
         fd:80:28:11:b6:92:89:12:65:5e:4b:b6:e4:00:e8:7a:64:ee:
         83:bf:70:ab:d2:63:bf:8b:c5:3e:cc:d2:46:27:47:d7:33:f0:
         72:a3:df:55:94:ec:65:b0:b3:79:12:4c:70:a7:af:73:f0:9b:
         ea:5a:7a:a8:fe:26:4a:b2:ab:16:53:f8:a3:77:77:bc:ed:ed:
         ee:66:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:04:43 2024 by rpki-client on console-fra.rpki-client.org